Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
File:                     XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json)
Hash identifier:          ux7GMx+1CfnJDdYZ6//1QDLOxORPnVaLW7uTXjxe0Dc=
Subject key identifier:   5D:73:B1:A3:EB:36:22:4E:82:C6:59:85:25:CE:9C:46:03:9F:D9:AB
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       028D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
Manifest number:          0255
Signing time:             Sat 03 Oct 2026 03:17:04 +0000
Manifest this update:     Sat 03 Oct 2026 03:17:04 +0000
Manifest next update:     Sat 10 Oct 2026 03:17:04 +0000
Files and hashes:         1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: K2FC2n0O0TBHkyi4FsagB6Njt/2tjPr++yjKJSSKXes=)
                          2: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: YHtjLyAXEGFuWuiIIOzXr+jeSKAYlLoGk3pKl4f1Sjg=)
                          3: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: 60mmp2xkt956dxyjxxyqpf2kD3SD5zTs5NXxpAz3Fmk=)
                          4: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: MCZY8TcdrHRZrLBUjIYxaW3GviqDbhXanSznbYkRJNw=)
                          5: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: pcDD9YbNb3qCe0sHsz+XMj1O2bqfga6lzkQW7K0JeOI=)
                          6: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: 7+C/2L+WKOdEH1KPhli+JgCKdoROk+TjdXP5dk7JJEE=)
                          7: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: k6hiSh/WFo6akSjWYkoigb0PhpCRTQBWZ0EKHh/r2Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Oct  3 03:17:04 2026 GMT
            Not After : Oct 10 03:17:04 2026 GMT
        Subject: CN=6ac073b0-f547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:b2:1a:ff:bd:ef:63:3f:71:83:bc:97:ef:
                    25:77:fc:12:d3:ab:cb:2b:f3:61:7d:b3:3f:60:95:
                    88:a9:ed:12:d5:19:81:07:b6:e4:60:db:24:4e:a8:
                    a8:f5:68:0f:81:20:8d:3c:db:23:41:37:de:ad:47:
                    a0:20:f8:f2:be:2e:30:b1:c2:ba:16:d6:bd:6f:9b:
                    30:b0:2e:9d:4f:d5:7a:e0:ea:49:29:0c:43:da:5b:
                    38:f4:f1:26:76:20:4a:ee:0a:d0:67:93:32:f5:7a:
                    0e:0c:52:ed:d3:80:5b:72:07:0e:9d:fe:bd:8e:f4:
                    06:ff:8b:0b:84:85:61:cd:dc:7d:3d:0d:09:34:76:
                    12:49:de:79:2e:08:14:6b:09:cb:c0:fc:a4:8a:08:
                    47:16:56:cc:a9:43:38:39:38:a8:30:1c:43:8d:5e:
                    91:b9:af:ee:67:27:25:e6:5a:eb:67:29:0b:2a:95:
                    55:40:95:28:f6:8b:7e:66:ea:48:35:d0:57:d7:e8:
                    3b:43:16:bf:3c:2f:2d:42:f7:6c:70:3a:11:66:b2:
                    80:e7:29:4d:ea:07:7b:df:26:7f:2e:8f:8f:23:2f:
                    8a:d2:41:e4:08:2c:6f:16:c0:22:38:e6:b8:e3:4c:
                    e4:e4:f8:5a:01:34:92:24:fe:31:4a:12:9a:aa:25:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:B1:A3:EB:36:22:4E:82:C6:59:85:25:CE:9C:46:03:9F:D9:AB
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:9a:6c:33:ab:a5:ce:0d:8e:79:4a:06:bf:e2:f0:a4:1c:
         ae:71:8c:c4:ec:31:65:cd:5e:69:4c:52:2c:1f:49:29:8e:bc:
         ce:bb:de:cb:07:61:c2:02:2d:c4:d1:33:95:3b:20:07:05:05:
         80:f4:76:28:10:97:14:ba:90:4f:1e:21:45:1a:d4:31:11:0b:
         b2:c8:b5:63:d8:46:af:bc:77:c1:45:1e:e1:e1:8d:59:57:b5:
         1d:94:a4:7c:42:27:d1:55:1d:61:7a:0b:7c:e9:c4:b4:82:c5:
         d1:3d:73:ae:9d:5e:13:e2:ae:f1:d1:5b:59:db:d5:49:b0:dc:
         3c:d5:83:74:70:85:9c:c8:90:46:78:27:62:78:99:1d:0a:0d:
         4f:02:21:b7:87:bc:9d:fc:5a:6a:6c:b3:06:5d:33:ad:14:97:
         c4:8e:e6:15:f7:5b:49:3f:c8:68:74:48:35:f4:ac:ee:ea:fa:
         cd:57:12:4b:80:0c:d2:d9:0b:d2:f9:28:34:23:d7:fa:1a:0b:
         e0:2e:ab:5b:08:ac:39:0f:21:cc:01:a4:fe:f6:66:eb:53:43:
         08:0a:40:8a:62:4b:61:21:b1:41:74:4f:7d:de:c7:7f:8f:fa:
         59:f4:ec:ca:aa:f7:b6:6f:6a:73:f3:28:5a:48:77:0a:6b:1a:
         bd:1e:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:25:00 2026 by rpki-client